I'm working on the same problem atm, however i can't get it to work, but maybe my experiences help you.

As far as i understood, you need a user on the server, that holds the Queue, who is used in the connection.

So on the server with the queue, you use add-user.bat to create a Application User, lets say with name <<NAME>>.When the CLI asks you, if the user should be used in a remote connection (the last step of the user creation), say yes and save the Base64 encodes secret identity (lets call it <<IDENT>>) it gives you.

On the server holding the MBD, you need a new security realm, so put the following into the server2.xml

<security-realms>

..

<security-realm name="queue-security-realm">

<server-identities>

<secret value="<<IDENT>>"/>

</server-identities>

</security-realm>

...

</security-realms>

You now need an outbound-socket-binding to the host:port, server1 is running on, like localhost:8080. Put this also into the server2.xml

<socket-binding-group ....>

...

<outbound-socket-binding name="remote-queue">

<remote-destination host="localhost" port="8080"/>

</outbound-socket-binding>

...

</socket-binding-group>

At last, you can define the connection from server2 to server1, by putting this into the server2.xml